Package Health/ousid/torchlight-commonmark

ousid/torchlight-commonmark

Clear documentation, tests, licensing, and a GitHub release make the package straightforward to inspect and integrate. The small dependency surface and absence of install scripts are reassuring, but workflow references are unpinned and no security policy or scanning is present.

Latest v1.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about 1 year and 4 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and compatibility work.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence of limited recent maintenance.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a verdict, but it provides no community signal to offset the quiet maintenance record.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning is a hygiene gap, not evidence that the package is unsafe on its own.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package with no other security-process evidence.